CVE-2017-3154: Exposure of Sensitive Information to an Unauthorized Actor

Error responses from Apache Atlas versions 0.6.0-incubating and 0.7.0-incubating included stack trace, exposing excessive information...

CVE-2017-3153: Improper Neutralization of Input During Web Page Generation

Apache Atlas versions 0.6.0-incubating and 0.7.0-incubating were found vulnerable to Reflected XSS in the search functionality...

CVE-2017-3152: Improper Neutralization of Input During Web Page Generation

Apache Atlas versions 0.6.0-incubating and 0.7.0-incubating were found vulnerable to DOM XSS in the edit-tag functionality...

CVE-2017-3155: Improper Neutralization of Input During Web Page Generation

Apache Atlas versions 0.6.0-incubating and 0.7.0-incubating were found vulnerable to cross frame scripting...

CVE-2017-3150: Improper Neutralization of Input During Web Page Generation

Apache Atlas versions 0.6.0-incubating and 0.7.0-incubating use cookies that could be accessible to client-side script...

PT-2017-15691

Name of the Vulnerable Software and Affected Versions Apache Atlas versions 0.6.0-incubating and 0.7.0-incubating Description The issue is related to cross frame scripting. Recommendations For Apache Atlas version 0.6.0-incubating, update to a version that includes a fix for this issue. For Apach...

atlasrealtyinc.com XSS vulnerability

Vulnerable URL: http://www.atlasrealtyinc.com/%3Cimg%20src=x%20onerror=alert'openbugbounty'%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 05.11.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website...

tampabay.wateratlas.usf.edu XSS vulnerability

Vulnerable URL: http://www.tampabay.wateratlas.usf.edu/coastal/waterquality.asp?wbodyatlas=gulf=1/-///'/"//--...

Apache Atlas Information Disclosure Vulnerability

Apache Atlas is a set of scalable and extensible core functional governance services from the Apache USA Software Foundation. An information disclosure vulnerability exists in Apache Atlas versions 0.6.0, 0.7.0, and 0.7.1. An attacker could exploit the vulnerability to obtain sensitive informatio...

Directory Traversal

Apache Atlas is vulnerable to directory traversal attacks. The attacks can be triggered because it does not properly handle URI input from the users, allowing an unauthorized access to webapp directory by using direct URIs such as /js or /img...

Cross-Site Scripting (XSS)

atlas-dashboardv2 is vulnerable to reflected cross-site scripting XSS attacks. The search function does not sanitize the search queries that are passed to the application, allowing a malicious user to inject and execute arbitrary javascript...

Cross Frame Scripting

atlas-dashboardv2 is vulnerable to cross frame scripting. The library allows the use of external frames on the index page, allowing a malicious user to inject and execute arbitrary javascript via an iframe...

Information Disclosure

atlas-webapp is vulnerable to information disclosure. The library prints sensitive information in its stack trace error logs. A malicious user can then access sensitive information stored on these logs...

Insecure Cookies

atlas-webapp is vulnerable to insecure cookies. The library uses a predictable cookie name in the webapp. This can allow a malicious user to access sensitive data contained in the cookies...

CVE-2016-6100

IBM Disposal and Governance Management for IT and IBM Global Retention Policy and Schedule Management, components of IBM Atlas Policy Suite 6.0.3 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that th...

Cross site request forgery (csrf)

IBM Disposal and Governance Management for IT and IBM Global Retention Policy and Schedule Management, components of IBM Atlas Policy Suite 6.0.3 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that th...

CVE-2016-6100

IBM Disposal and Governance Management for IT and IBM Global Retention Policy and Schedule Management, components of IBM Atlas Policy Suite 6.0.3 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that th...

CVE-2016-6100

IBM Disposal and Governance Management for IT and IBM Global Retention Policy and Schedule Management, components of IBM Atlas Policy Suite 6.0.3 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that th...

CVE-2016-6100

CVE-2016-6100 affects IBM Disposal and Governance Management for IT and IBM Global Retention Policy and Schedule Management (components of IBM Atlas Policy Suite 6.0.3). The vulnerability is a cross-site request forgery that could allow an attacker to perform malicious and unauthorized actions tr...

PT-2017-8896

Name of the Vulnerable Software and Affected Versions IBM Atlas Policy Suite version 6.0.3 Description The issue allows an attacker to execute malicious and unauthorized actions by exploiting a cross-site request forgery weakness. This could be achieved by transmitting malicious actions from a us...